[AKS] `az aks create` `az aks nodepool add/update`: Add Trusted Launch options `--enable-vtpm` and `--enable-secure-boot`

[lilypan26]

Related command

• az aks create
• az aks nodepool add
• az aks nodepool update

Description

Add trusted launch options --enable-vtpm, --disable-vtpm, --enable-secure-boot, --disable-secure-boot to support enabling disabling vTPM and secure boot on AKS nodepools.

Testing Guide

History Notes

[Component Name 1] BREAKING CHANGE: az command a: Make some customer-facing breaking change [Component Name 2] az command b: Add some customer-facing feature

---

This checklist is used to make sure that common guidelines for a pull request are followed.

• [x] The PR title and description has followed the guideline in Submitting Pull Requests.

• [x] I adhere to the Command Guidelines.

• [x] I adhere to the Error Handling Guidelines.

[azure-client-tools-bot-prd[bot]]

️✔️AzureCLI-FullTest

️✔️acr

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️acs

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️advisor

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️ams

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️apim

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️appconfig

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️appservice

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️aro

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️backup

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️batch

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️batchai

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️billing

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️botservice

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️cdn

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️cloud

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️cognitiveservices

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️compute_recommender

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️config

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️configure

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️consumption

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️container

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️containerapp

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️core

️✔️2018-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2019-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️cosmosdb

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️databoxedge

️✔️2019-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️dla

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️dls

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️dms

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️eventgrid

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️eventhubs

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️feedback

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️find

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️hdinsight

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️identity

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️iot

️✔️2019-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️keyvault

️✔️2018-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️kusto

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️lab

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️managedservices

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️maps

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️marketplaceordering

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️monitor

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️mysql

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️netappfiles

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️network

️✔️2018-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️policyinsights

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️privatedns

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️profile

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️rdbms

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️redis

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️relay

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️resource

️✔️2018-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2019-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️role

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️search

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️security

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️servicebus

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️serviceconnector

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️servicefabric

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️signalr

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️sql

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️sqlvm

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️storage

️✔️2018-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2019-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️synapse

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️telemetry

️✔️2018-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2019-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️util

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

️✔️vm

️✔️2018-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2019-03-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️2020-09-01-hybrid

️✔️3.11

️✔️3.12

️✔️3.9

️✔️latest

️✔️3.11

️✔️3.12

️✔️3.9

[azure-client-tools-bot-prd[bot]]

Hi @lilypan26, Since the current milestone time is less than 7 days, this pr will be reviewed in the next milestone.

[azure-client-tools-bot-prd[bot]]

❌AzureCLI-BreakingChangeTest

❌acs

rule	cmd_name	rule_message	suggest_message
❌ 1010 - ParaPropUpdate	aks nodepool add	cmd aks nodepool add update parameter spot_max_price: updated property default from nan to nan	please change property default from nan to nan for parameter spot_max_price of cmd aks nodepool add
⚠️ 1006 - ParaAdd	aks create	cmd aks create added parameter enable_secure_boot
⚠️ 1006 - ParaAdd	aks create	cmd aks create added parameter enable_vtpm
⚠️ 1006 - ParaAdd	aks nodepool add	cmd aks nodepool add added parameter enable_secure_boot
⚠️ 1006 - ParaAdd	aks nodepool add	cmd aks nodepool add added parameter enable_vtpm
⚠️ 1006 - ParaAdd	aks nodepool update	cmd aks nodepool update added parameter disable_secure_boot
⚠️ 1006 - ParaAdd	aks nodepool update	cmd aks nodepool update added parameter disable_vtpm
⚠️ 1006 - ParaAdd	aks nodepool update	cmd aks nodepool update added parameter enable_secure_boot
⚠️ 1006 - ParaAdd	aks nodepool update	cmd aks nodepool update added parameter enable_vtpm

[yonzhan]

AKS

[FumingZhang]

/azp run

[azure-pipelines[bot]]

Commenter does not have sufficient privileges for PR 29272 in repo Azure/azure-cli

[FumingZhang]

lgtm, GA previous change in aks-preview #7243, please fix failed CI checks

Queued live test to validate the change

• test_aks_create_update_secure_boot_flow
• test_aks_create_update_vtpm_flow

Requeued live test

[zhoxing-ms]

/azp run

[azure-pipelines[bot]]

Azure Pipelines successfully started running 3 pipeline(s).

[FumingZhang]

Requeued live test

[FumingZhang]

feature not ready, expected to be postponed to September

[zhoxing-ms]

/azp run

[azure-pipelines[bot]]

Azure Pipelines successfully started running 3 pipeline(s).

[zhoxing-ms]

@lilypan26 Could you resolve these CI issues and conflicts?

[zhoxing-ms]

Please note that we are launching the release for this sprint this week. Please resolve all comments by tomorrow, otherwise the release of this PR will have to be postponed to the next sprint (on 10-08)

[FumingZhang]

Live test failed with the following error

E                   azure.cli.core.azclierror.BadRequestError: (UnmarshalError) Invalid request body. Converting request body to a managed cluster encountered error: json: unknown field "securityProfile" Check that the field is in the right location, is spelled correctly, and is supported in the API version. Visit aka.ms/aks/apiversions for more API version information..
E                   Code: UnmarshalError
E                   Message: Invalid request body. Converting request body to a managed cluster encountered error: json: unknown field "securityProfile" Check that the field is in the right location, is spelled correctly, and is supported in the API version. Visit aka.ms/aks/apiversions for more API version information..

[zhoxing-ms]

@lilypan26 Could you please address these CI issues and comments? Please note that we are launching the release for this sprint this week. Please resolve all comments and CI issues by tomorrow, otherwise the release of this PR will have to be postponed to the next sprint (on 11-05)

[lilypan26]

/azp run

[azure-pipelines[bot]]

Commenter does not have sufficient privileges for PR 29272 in repo Azure/azure-cli

[lilypan26]

successful live test run: https://dev.azure.com/msazure/CloudNativeCompute/_build/results?buildId=105831660&view=results

[yonzhan]

Please fix CI issues

[yanzhudd]

/azp run

[azure-pipelines[bot]]

Azure Pipelines successfully started running 3 pipeline(s).